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1. INTRODUCTION 



The technological development of the last two decades, 
particularly in the areas of space flight, nuclear power generation, 
and weapons systems, has forced reliability analysts to consider 
systems whose configuration change over time. "Phased missions" 
have received attention in the basic papers of Rubin [5] and 
Weisberg and Schmidt [9] which present computational procedures 
to approximately predict mission reliability and crew safety for 
manned spacecraft, and in the United States Navy reliability 
manual NAVORD OD 29304 Revision A [8] . 

Recently, Esary and Ziehms [4] have investigated a phased 
mission of the following form: 

A system consists of several independently performing 
components each of which functions continuously in time 
until failure occurs, and remains failed thereafter; 
repair or replacement is not possible. The system per- 
forms a mission which is divided into consecutive time 
periods, or phases, of known duration. The system con- 
figuration, defined as a subset of the components and 
their functional organization, changes from phase to phase. 

As is the case with individual components, only two states 
of the system are recognized, functioning or failed. The 
mission is successful if the system functions throughout 
all phases. 

Their main result is that any multi-phase mission of this type 
can be transformed into an equivalent, synthetic, single-phase 



system, and thus that the phased mission problem can be solved in 
principle by standard reliability methods. They point out, how- 
ever, that a direct implementation of their transformation could 
be frustrated by a large number of components in the equivalent 
system. 

In this paper we employ the ideas of Esary and Ziehms to 
study some approximations to mission reliability and to develop 
an algorithm which may be of practical interest. In addition, we 
extend the reliability calculus of Rubinstein [6, 7] and Esary and 
Hayne [1] , based on an approximate hazard transform, to phased 
missions, and demonstrate how the extended calculus can be used in 
situations where phases are not of known fixed duration. 

2. PROBLEM FORMULATION AND PREVIOUS RESULTS 

Suppose that the system under consideration has n compo- 
nents, labelled Cj^,...,C^, with independent times to failure 
Tj^,...,T^. For all times t ^ 0, define the performance state 
indicator vector of the set of components k(t) = (t) , . . . ,X^ (t) ) 

by Xj^(t) = 1 iff Tj^ > t, and ® otherwise, 

k = l,...,n. Assume that the mission is divided into m phases, 
and that phase j starts at time t. , and ends at time t., 
j = l,...,m, with tp = 0. Finally, let be the structure 

function which describes the configuration (assumed to be coherent) 
of the system in phase j, j = l,...,m. Then the event that the 

mission is successful is {<j>, [X(t,)] = 1 , ,<t> [X(t )]=!}, and 

± ^ ± m in 

the mission reliability p can be expressed as 
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( 1 ) 



m 

p = E TT ^ • 

j=l 

To obtain an equivalent single-phase system, pseudo- 
components are introduced whose reliabilities are the con- 

ditional phase reliabilities of the original components. 
Formally, for k = l,...,n and j = l,...,m, the performance 
state indicator variable of pseudo-component has the 

distribution 



P[Uj^l = 1] = P[Xj^(t^) = 1] , 



( 2 ) 



= 1] = P[Xj^(tj) = 1 1 = 1] , 3 ^ 1 . 

The transformation is accomplished by replacing, in the configura- 
tion for phase j , component C, by a series system in which 

K, 

the pseudo-components perform independently with 

the probabilities of functioning given in (2) , and by regarding 
the transformed phase configurations as subsystems operating in 
series. As an illustration, consider the following example. 



Example 1 . A system with three components performs a three- 
phased mission whose phase configurations can be represented by the 
block diagrams 



in phase 1; 



3 



in phase 2 



in phase 3: 



Then the equivalent system has the block diagram 









- ^21 


^22 




-^11- 




-^11 


^12 


^^31 


^32 














— c., — 




— c.. 


— — 


— C.., 


— C.. 



'31 



c — c c 

^21 ^22 ^23 



□ 



The reliability of the equivalent system is 



m 



(3) 



P = E TT 

j=l 3 






where u'^> = (U^. U^.) and “ni“nj> ' 

The value of p as given by (3) agrees with the value of p as 
given by (1) [4, Theorem 3.1], and thus the ordinary reliability 

of the equivalent system whose components perform independently 
is the same as the reliability of the orginal system for its 
phased mission. 



3. SOME BOUNDS ON MISSION RELIABILITY 

An obvious first approach to approximating mission relia- 
bility — discussed in [4] and repeated here for the sake of com- 
pleteness — is to compute the reliability of each phase configuration 
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separately and then to multiply the results together. There are 
at least two choices of component reliabilities to use in doing 
this: the component conditional phase reliabilities 



(4) 



”kl ^^\**^1* 



\j ' =11 



j 2,...,m; 



which are the reliabilities of the pseudo-components in the 
equivalent system, or the component (unconditional) reliabilities 
through each phase 



(5) 






j l,...,m. 



k = l,...,n. The first choice leads to approximating mission 
reliability by 



( 6 ) 



m 

7T = TT h.(TT, .)/ 

PRF ' ' D 1 j n] 



and the second choice to approximating mission reliability by 

m 



(7) 



PpRF ^^Ij' * *• '*^nj^ ' 



where in both cases h ^ , j = l,...m, are the reliability func- 
tions for the phase configurations. (The reliability function 
of a system with structure function <{) is defined by h (p^^ , . . . ,p^^) 
= E (}) (Xj^, . . . ,X^) , where X^^,...,X^ are independent Bernoulli 
random variables with P[Xj, = l] k = l,...,n.) The sub- 

script PRF in (6) and (7) is meant to indicate that these 
approximations are based on phase reliability functions. 
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It has been shown using (3) [4, Remark 4.1] that (6) gives 

an optimistic result and that (7) gives a conservative result, 
i.e. that for p as given by (1) or (3) , 



( 8 ) 



PRF 



S p ^ TT 



PRF * 



The above approximations can be employed only when the 
reliability functions of all m phases are known. Although to 
compute them is considerably easier than to compute the overall 
reliability function for the equivalent system, it may in practical 
problems still be a formidable task. We will therefore now discuss 
an approach which avoids these difficulties. 

For coherent single-phase systems with independent com- 
ponents, Esary and Proschan [2] have established two bounds on 
system reliability which do not involve the reliability function: 
the minimal path upper bound and the minimal cut lower bound . 

These bounds, when applied to each phase separately, can be used 
to approximate mission reliability in the multi-phase case. Let 
h„„. and h^ „ • denote the minimal path upper bound and the 

UJdJ -LjJd] 

minimal cut lower bound, respectively, for phase configuration 
j, j = l,...,m. Using basically the same approach as before, 
and choosing as component reliabilities the conditional phase 
reliabilities in one case and the (unconditional) relia- 

bilities p, . in the other, we obtain the approximations 



m 



(9) 

and 



ir 



PUB hygj (TT^j , . . . 
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( 10 ) 



m 



^PLB "n* 



j=l 



hr i~)'(P~i */***/P *)/ 

LBj I3 ^n] 



where the subscripts are to indicate that these approximations 
are based, respectively, on £hase upper bounds and phase ^ower 
bounds. Since the phase configurations are coherent by assumption, 
hence h^ ^ ^UB j ' ^ “ l,...,m; it thus follows from (6) 

and (9) that 



( 11 ) 



^PRF ^ ’^PUB' 



and from (7) and (10) that 



‘^PLB ^ *^PRF' 

From (8), (11), and (12) we can conclude that (a) is an upper 

bound on mission reliability, and (10) is a lower bound on mission 
reliability. 

4. CUT CANCELLATION AND FURTHER BOUNDS 

Rubin, Weisberg and Schmidt used a method to simplify the 
sequence of phase configurations prior to beginning reliability 
calculations which has become known as "cut cancellation." Cut 
cancellation does not affect mission reliability [4, Remark 4.2] 
and can be summarized in the following rule: 

A minimal cut set in a phase can be cancelled, i.e. omitted 
from the list of minimal cut sets for that phase, if it 
contains a minimal cut set of a later phase. 

The next example illustrates how cut cancellation works. 
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Example 2 . Consider the mission of Example 1. The minimal 



cut sets are 



in phase 1: 

- in phase 2: {€^,€ 2 } , {C 2 »C 2 > 

in phase 3: ^^ 2 ) 

The phase 1 cut set contains the phase 2 cut set 

{01,03}, and thus can be cancelled in phase 1, leaving a config- 
uration which can never fail. Both the phase 2 cut sets {Cj^,C 2 ) 
and { 02 , 02 } contain the phase 3 cut set {C 2 }, so they can be 
cancelled in phase 2. After cut cancellation, the simplified 
phase configurations can be represented by the block diagrams 



in phase 1: 



in phase 2 : 



in phase 3: 




After cancellation, the transformation can be applied to obtain 
the equivalent system with the block diagram 



0 0 

11 ^12 



^21 ^^22 ^23 



^31 ^32 
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which is considerably simpler than the equivalent system of 
Example 1, but has the same reliability. □ 



The methods of approximating mission reliability described 
in the previous section can also be employed after cut cancella- 
tion has been performed. Denoting the reliability functions of 
the simplified phase configurations by h ^ , j = l,...,m, the 
approximations corresponding to Pppp 



are 



(13) 
and 

(14) 



m 

^PRF-CC " 



m 

^PRF-CC ^ ^j=i ^^Ij " * * '*^nj^ ' 



respectively, where the added subscript CC indicates that cut 
cancellation has been performed. Similarly, denoting by 
and the minimal path upper bound and the minimal cut lower 

bound, respectively, for the simplified configuration of phase j, 
j = l,...,m, we obtain the approximations 



m 



(15) 
and * 

(16) 



ir 



PUB-CC ^UBj ^"^Ij " ' * '^nj^ 



m 



*^PLB-CC TI" 



j=l 



T *(l^^ */***fP *)* 

LB] 1] n] 



To show that these four approximations are bounds on mission 
reliability, we observe first that since the simplified phase 
configurations are coherent, hence ^ h^ s: h^g^, j = l,...,m. 

It follows from (13) and (15) that 
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(17) 



^PRF-CC ^ ^PUB-CC' 



and from (14) and (16) that 



(18) 



^PLB-CC ^ ^PRF-CC' 



Further, since the phase reliability functions are not less after 
cut cancellation than before, i.e. h^ ^ h^ , j = l,...,m, then 



(19) 



77 ___ ^ __ 

PRF PRF-CC 



follows from (6) and (13), and 



( 20 ) 



^PRF ^ ^PRF-CC 



follows from (7) and (14), where the latter inequality is noted 
here for further reference only. From (19) and (8) we conclude 

that '^'^pRF-CC ^PUB-CC fact upper bounds on mission 

reliability. 

To establish that ^^^<1 Prim lower bounds, 

we need the following remark. 



Remark 1. Let <|> • be the structure function of the sim- 
3 

plified configuration of phase j, j = l,...,m, and let U, . , 
k = l,...,n, j = l,...,m, be the indicator variables of the 
pseudo-components in the equivalent system. Then 
m , , V , V , . > m 



TJ E4> . 

j=l ~ 



^ E JT C() . ) 

3 = 1 
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Proof . The proof uses standard properties of associated 
random variables which are discussed in [3] . 

The simplified phase configurations are coherent, and hence 
the structure functions <))j, j = l,...,m, are non -decreasing . 

The Bernoulli random variables U, . , k = l,...,n, j = l,...,m, 
are independent. Therefore ^ . . .U ^ , j = l,...,m, 

are associated Bernoulli random variables for which the assertion 
of the remark holds. □ 

m 

Using (2) , (5) , and (14) we obtain PpRp.QQ = TT E(J) . 

j — 1 

(U ^ U ^ . U ^ ^ ^ ; since cut cancellation does not affect mission 



m 



reliability, (3) can be written as p = E TT 4> • (U^ U . .U' ) 

j=l ^ 

Application of Remark 1 then yields the inequality 



,(j) 



( 21 ) 



^PRF-CC ^ 



which together with (20) establishes the desired results 



5. COMPARISONS OF THE BOUNDS 

The magnitudes of the bounds on mission reliability pre- 
sented in the previous sections, and of the mission reliability 
itself, can be ordered. This ordering is displayed in Figure 1 
where the superscripts refer to the defining equations and inequali 
ties which are summarized. 

No general inequalities can be established between 

""PRF-CC ""pub' between PpL^.^c ^^d In the case 

of the two upper bounds, cut cancellation on one hand and the use 
of phase upper bounds instead of phase reliability functions on 
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the other hand both tend to increase the apparent phase 

reliabilities, the amount of increase depending on the structure 

of the mission as well as on the component reliabilities. In the 

case of the two lower bounds, PpLg-cc tends to be greater than 

p because of cut cancellation, but also smaller because of 

PKr 

the use of phase lower bounds instead of phase reliability func- 
tions. Again, both the structure of the mission and the component 
reliabilities determine which of them is greater in a particular 
case . 

The inequality 



( 22 ) 



^PLB ^ ^PLB-CC 



has not yet been established formally, but is an obvious conse- 
quence of (10), (16), and the fact that h ^ h^ ^ • , j = l,...,m, 

A similar inequality between the upper bounds and tt 

however, does not exist, because it is not necessarily true that 
hygj ^ hyg j . Since this may not be intuitively obvious, we give 
the following illustration. 



Example 3 . For the mission of Example 1, the minimal path 

upper bound for phase 2 is %g 2 ^^ 12 ' ^22 '^32^ ” ^ 12^22 '' ^12^32 '' 
^22^32 before cut cancellation, and byg 2 (^12 ' ^22 ' ^32 ^ ~ ^12 ^32 

after cut cancellation. Assuming that '^■^2 ~ ^22 ~ ^32 ~ then 

^UB2^^^ = ( 3-3it^+tt'^ ) and hyg 2 (ir) = 17 ( 2 - 77 ). For 0 < 17 ^ . 8 , 

hyg 2 (ir) < hyg 2 (ir), and for . 9 ^ 77 < 1 , hyg 2 (ir) > hyg 2 (it) . □ 
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It is also possible to compare the bounds with respect to 
the computational effort required to compute them. In general, 
less effort is required to compute the m phase reliability 
functions separately than to compute one reliability function 
for the equivalent system; phase bounds are easier to compute 
than phase reliability functions; and cut cancellation simplifies 
all reliability calculations, although it requires computational 
effort itself. The diagram below is an attempt to summarize these 
observations. Its comparisons may not hold in all cases, but do 
indicate what is usually true. The symbol stands for "requires 

less computational effort than." 



IT —•<-17 TI '♦'TT — 

PUB-CC PUB PRF-CC PRF 

^PLB-CC ^PLB ‘^PRF-CC ^PRF 



P 



6. AN ALGORITHM FOR THE "BEST" LOWER BOUND 

Trying to select the best bound from those presented here 
is a problem whose solution depends on the circumstances of each 
particular application and cannot be given in general. If one 
is interested in a conservative rather than an optimistic approxi- 
mation, and if the system to be analyzed has components with 
uniformly high conditional reliabilities in all phases, then the 
qualitative comparisons of the previous section and numerical 
results suggest that P^t d r-o is a good choice. Since these 
conditions are frequently encountered, an algorithm for computing 
PpLB_cc given below. Inputs to this algorithm are the phase 
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configurations (in the form of block diagrams, fault trees, 
structure functions, or complete lists of minimal cut sets or 
minimal path sets) , and estimates of the component conditional 



phase reliabilities tt, . , k = l,...,n, j = l,...,m. If one is 
willing to assume that components have constant failure rates 
throughout each phase, then the component conditional phase 
reliabilities are given by 

-r, .d . 

ir„ - = e "3 3, 
k] 

where rj^ ^ is the failure rate of component Cj^ in phase j , 
and d j is the duration of phase j, k = l,...,n, j = l,...,m. 

Algorithm for Computing gg 

(1) For j = l,...,m, find the minimal cut sets for the 
configuration of phase j. 

(2) Perform cut cancellation according to the rule given in 

Section 4. For j = l,...,ni, denote the number of 

minimal cut sets remaining in phase j by k(j), and 
th 

the i— minimal cut set remaining in that phase by 
Kj^, i = 1, k(j) . 

(3) For k = l,...,n, compute p, . for all j = l,...,m 



for which C, eK.. for some i = 1, 
k ji 



,k(j), from 



( 4 ) Compute P 



PLB-CC 



Okj = TT 

from 



ir 



i=l 



ki' 



PLB-CC 



m k( j) 

~ . , "n”. , " T^C e K . . ^ ^ • 

3=1 1=1 k 31 -* 



15 



The notation necessary to formulate this algorithm in precise 
mathematical terms obscures its basically very simple content. 
We can restate it in the following more intelligible form: 



( 1 ) 

( 2 ) 

(3) 



Find the minimal cut sets for all phase configurations. 
Perform cut cancellation. 

Compute p, . for each phase j in which component 
C, is relevant from 

^ j 






IT 



ki 



(4) Obtain the "best" lower bound on mission reliability by 
computing 

,TT , ,TT Cl -IT 

{all phases} {all min cut sets {all components in 

in each phase} each min cut set} 



The following example, adapted from [4], illustrates how the 
algorithm works. 



Example 4 . A system with six components is to perform a 
three-phased mission. The phase configurations are represented 
by the block diagrams 



phase 1 




C 



3 



phase 2 




16 



phase 3 




The duration of the phases are = 30 min, d2 = 2 hours, and 

d^ = 10 hours. It is assumed that the components have failure 
rates r, . which are constant throughout each phase; estimates 
of their values (in hours are 



j\k 


1 


2 


3 


4 


5 


6 


1 


0.000 


0.001 


0.020 


0.040 


0.100 


0.000 


2 


0.020 


0.003 


0.006 


0.010 


0.500 


0.020 


3 


0.010 


0.002 


0.005 


0.020 


0.500 


0.020 



A lower bound on mission reliability is wanted. 

The application of the algorithm yields the following 
results : 

( 1 ) The minimal cut sets are 



- in 


phase 


1: 


#{€3,0^}#, tC3,C5) 






- in 


phase 


2: 


#{€2,03}#, 


JlCj.Cj}#, 


{€3,04} 


- in 


phase 


3 : 




{Cj.Cg) 





( 2 ) The minimal cut sets marked #{ }# above are cancelled. 
The remaining minimal cut sets are 

- in phase 1: {C^fC^} 

- in phase 2: {C^/C^} 

- in phase 3 : {Cj^,C2)/ {C^rC^} , 
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(3) We have to compute P 23 ' *^31' *^32' '^33' 

^ 42 ' *^51' *^63* Since in the present case 

~^k ■ 

iTj^ j = e ^ ^ , we use the equation 



TT^ TT^ 

i^k-i TT ”>1 TT e = e 



-^i=l‘'ki'»l 



and obtain the following values for (rounded to four 

decimals) 



j\k 

1 

2 

3 



9608 

8694 



9738 



3 

. 9900 
. 9782 
.9305 



9608 



5 

9512 



.7866 



(4) The bound Pr,T n is given by 

FJjJd — UU 



^PLB-CC (l-p^j^) (1 P 51 ) ] X [1 - (1-Pj^2) 1 



x[l - (I-P 32 ) (I-P 42 ) ] tl - (i-Pis) (i"P 33 ) ] 



x[l - (I-P 23 ) {I-P 33 )] "" tl - (I-P 23 ) (i~P63^ 1 • 

For the values of p, . computed in Step (3) , we obtain, 
rounded to four decimals, 

*^PLB-CC “ -9438. 

As a comparison, the reliability function for the mission is 
^ ^ *^12 *^33 ^^ 23 '*'^ 63”'^23 ^ 63 ^ 



^13 *^23 ^^^”^ 31 ^^ 42*^51 ^*^31 *^ 32 ^ *^42 ^*^32 *^ 33 ^^' 
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and thus the exact mission reliability, rounded to four decimals, 
is 

p = .9468. □ 



7. AN APPROXIMATE HAZARD TRANSFORM FOR PHASED MISSIONS 



Recently, Esary and Hayne [1] extended the scope of applica- 
tion of a simple reliability calculus of Rubinstein [6, 7] to 
coherent systems. This calculus uses an approximate hazard 
transform and leads to conservative approximations to system 
reliability. We will show here that its scope can be further 
extended to phased missions. 

The hazard transform of a system with reliability function 
h(p.,...,p ) is defined as 



-Uf -U^ 

H(Uj^, . . . , “ — lo^ h(e ,...,e ), 



where Uj^ = -log Pj^ is the component hazard of component Cj^ 

having reliability Pj^, k = l,...,n. The approximate hazard 
* 

transform H considered in [1] can be defined by the following 
rules: 

(1) For a system consisting of a single component Cj^ , 

* 

H = u, . 
k 

(2) For a system which is a combination of two modules (sub- 
systems with disjoint sets of components) having 

* * 

approximate hazard transforms H^^ and H 2 , 

* * * 

H = Hj^ + H 2 if the combination is series 

* * * 

H = Hj^ H 2 if the combination is parallel. 
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(3) For a coherent system with minimal cut sets 

* * 

whose approximate hazard transforms are 

* * * 

H = + . . . + . 



It has been shown [1, Theorem 2.5] that this approximate hazard 
transform is conservative, i.e. indicates greater system hazard 
(less system reliability) than the exact hazard transform. 

In the case of a phased mission, we can go one step further 
and define an approximate mission hazard transform by the rule 



(4) For a phased mission whose simplified phase configure- 

* * 

tions have approximate hazard transforms 

the approximate mission hazard transform is 

* * * 

H = H, + . . . + H , 

1 m' 



where the component hazards are 

k 1 , . . . n , j — 1 , . . . , m . 



u 



kj 



-log 



We will denote the reliability function corresponding to this 

* 

approximate mission hazard transform by h , i.e. 

* 



(23) 




By comparing steps (1) , (2) , and (3) of the rule above with 

the method of computing the minimal cut lower bounds for the 

reliability of the simplified phase configurations, we can conclude 

-Ht 

immediately that e ^ ^ h,. „ • , j = l,...,m. It then follows 

IjB] 

from (16) and (23) that 



(24) 



^ ^ '^PLB-CC' 
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★ 

and hence from (18) and (21) that h is a lower bound on mission 
reliability or, equivalently, that the approximate mission hazard 
transform is conservative. 

* 

An algorithm for computing the lower bound h follows 
the first three steps of the algorithm for computing P^td <-<-• 

irLixj 

The next steps are 



(5) Compute the component hazards 



u, . = -log p, . 
kD ^ k] 

for all (i,j) for which p, . has been computed in 
Step (3) . 

(6) Compute the approximate mission hazard transform 

* m 

H = I I. He eK “k1- 
j=l i=l k ji ''3 

(7) Compute the lower bound 



u* "H 
h = e 



A comparison of this algorithm with the one presented in 

★ 

Section 6 indicates that the computation of the lower bound h 

requires more effort than the computation of the lower bound 

* 

we also know from (24) that h is less precise than 
ppLB_cc* Thus, it may seem counterproductive to pursue the 
approximate mission transform any further. However, if one is 
willing to — or has to, for lack of better information — assume 



constant component phase failure rates, then the component hazards 
Ut, • take on the simple form u, . = ), r, -d-, and computations 

KJ K3 . , K1 1 

IX ^ 

are simplified considerably. In this case, an algorithm for h 
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consists of the following steps (expressed in an "intelligible" 
form) : 

* 

Algorithm for Computing h in the Case of 
Constant Component Phase Failure Rates. 



( 1 ) 

( 2 ) 

(3) 



Find the minimal cut sets for all phase configurations. 
Perform cut cancellation. 



Compute the component hazard Uj^j for each phase 
in which component Cj, is relavent from 






i=l 



r, . d. . 
ki 1 



j 



(4) Obtain the approximate mission hazard transform from 



H = I I ,TT u^. 

{all phases} {all min cut sets {all components in 
in each phase) each min cut set) 

* 

(5) Compute the lower bound h from 



h* - 

h — e 



When component phase failure rates are assumed constant, 
the approximate mission hazard transform becomes a polynomial in 
each of the phase durations. Thus, it is well suited for para- 
metric studies, as is demonstrated in the next example. 



Example 5 . Consider the mission of Example 4. Assume that 
all other data being the same as before — the duration of phase 2, 
d. 2 , is now uncertain, and that a sensitivity analysis on it is 
desired. 
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From the algorithm above, we obtain the following general 



expression for the approximate mission hazard transform: 
( 25 ) H = 

^^ll^l'*’^ 12 '^ 2 ^ ^^ 31 ^l‘‘'^ 32 ^ 2 ^ ^^ 4 l'^l‘*’^ 42 ^ 2 ^ 

+ (rj^j^dj^+rj^2‘^2'*’^13^3^ ^^31^l‘^^32^2''’^33^3^ 
<^2lV^22V^23^3> (^3lV^32^2-^^33^3) 

■'■ ^^ 21 ^l'^^ 22 ‘^ 2 ''’^ 23 ^ 3 ^ ^^ 61 ^l‘^^ 62 ^ 2 ''’^ 63 ^ 3 ^ * 



H as a function of d2 can be written as 



H (d2) = a + bd2 + cd^/ 



with 



a = 



Vii 



+ d^ (^ii^31+^21^31''’^21^61''’^31^41'^^31^51^ 

+ d^d^ <^ii^33+^i3^3i+^21^33‘''^23^31‘''^21^63''’^23^61^ 
■*■ ^3 ^^ 13 ^ 33 ‘'’^ 23 ^ 33 ‘^^ 23 ^ 63 ^ ' 



b = r 



12 



+ d^(r^^r32+r^2^31+r2^r32+r2irg2 

•"^ 22 ^ 31 -"^ 22 ^ 61 -"^ 31 ^ 42 -"^ 32 ^ 4 l) 

+ d3<r^2^33+'^13^32+^22^33+^22''63+''23^32'^^32^62) ' 



^ ^ 12 ^ 32 '*■ ^ 22^32 ■*■ ^ 22^62 ■'■ ^ 32^42 
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For the data given in Example 4, the numerical values of these 
coefficients are 

a = 0.012030 

b = 0.023333 hours ^ 

-2 

c = 0.000258 hours 



For various durations of phase 2 (in hours) , the approximate 

* 

mission hazard transform H and the lower bound on mission 
* 

reliability h , both rounded to four decimals, are shown below. 



^2 


* 

H 


* 

h 


0 


0.0120 


0.9880 


1 


0.0356 


0.9650 


2 


0.0597 


0.9420 


3 


0.0844 


0.9191 


4 


0.1095 


0.8963 


5 


0.1351 


0.8736 


6 


0.1613 


0.8510 


7 


0.1880 


0.8286 


8 


0.2152 


0.8064 


9 


0.2429 


0.7843 


10 


0.2712 


0.7625 



For d 2 = 2 hours, PpLB-CC ^ have been 

Their values are repeated below, together with 



computed in Example 4 . 

* 

the value of h 



(d 2 = 2 hours) , to facilitate a comparison. 



P 



= .9468 



PpLB-CC 

* 

h (d 2 = 2 hours) 



.9438 

.9420. 



□ 
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In the case of constant component phase failure rates, the 
approximate hazard transform can also be used to estimate mission 
reliability when phase durations vary randomly. If 
are nonnegative random variables denoting the durations of the 

phases, then the approximate mission hazard transform is 

* * 

EH (D, ,...,D ), where the function H is defined as before 
1 m 

and E denotes expectation. As an approximation to mission 
reliability we now use 



(26) 



g* = 



,D ) 

m 



t 



which is much easier to calculate than the exact value 
* 

„ -H (Dt,...,D ) _. -X . £ ^ 

Ee 1 m . Since e is a convex function of x, it 

* 

follows from Jensen's inequality that e ^ 

* 

— H (D D ) * 

Ee 1' ' ’ * ' m , and therefore g is a lower bound on mission 

reliability . 

In our last example, we show how this approximation can 

be used, even without a complete knowledge of the probability 

distributions of the D.'s. 

D 



Example 6 . Consider again the mission of Example 4, but 
this time assume that — all other data being the same as before — 
the durations of phases 2 and 3 are random. The mean durations 
are known to be ED 2 = d 2 = 2 hours and ED^ = d^ = 10 hours, 
and the total duration of these two phases together is 02 + 0 ^= 
12 hours. An estimate for the mission reliability under these 
circumstances is wanted. 
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* 

By rearranging the terms of (25) we can express H as a 
function of D 2 and by 

H (D^/D^) = a^^ + a2D2 + + a^D2 + + agD2D2 , 

where the coefficients ai^, . . . ,a.^ depend only on the known dura- 
tion of phase 1 and the component phase failure rates. Since 
D 2 + = constant, then Var D 2 = Var D^, and Cov(D 2 ,D 2 ) = 

-Var D 2 = -Var • Denoting this common but unknown variance by 
a^, we can write ED^ = + and ED 2 D 2 = 

d 2 d 2 ~cf^f and obtain 

EH (D 2 /D 2 ) “ ^2^2 ^ ^3^3 ^ ^4^2 ^ ^5^3 ^ ^6^2^3 ^ ' 

or, numerically, 

EH (02,0^) = 0.059728 + 0.000071 a^/hours^. 

For = 0, i.e. when the durations of phases 2 and 3 take on 

* 

their expected values with probability one, EH (02,0^) = 0.0597 
* 

and g = .9420, which agrees with the corresponding results of 

p * * 

Example 5. As a increases, EH (02,0^) increases and g 

decreases: since cannot be greater than 20 hours ^ under 

* 

the given conditions, the maximum value of EH (02,0^) is 0.0611, 

* 

and the corresponding minimum value of g is .9407. We can 
therefore conclude that the mission reliability is at least 0.94. 

□ 
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